An IS auditor is reviewing the quality control (QC) of the implementation process that supports an online reservation system. Which of the following findings would be the GREATEST concern?

The correct answer is D. Inadequate process to identify and control defects. The greatest concern in this scenario would be an inadequate process to identify and control defects. Without a proper process in place to detect, track, and address defects during the implementation of the online reservation system, the system could experience errors…

Submitted by fernanda_arg· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Options

AUse of compensating manual controls in place of systemic controls
BLack of business sign-off for technical configuration and settings
CLack of a peer review process during user acceptance testing (UAT) cycles
DInadequate process to identify and control defects

How the community answered

(54 responses)

A
9% (5)
B
4% (2)
C
17% (9)
D
70% (38)

Explanation

The greatest concern in this scenario would be an inadequate process to identify and control defects. Without a proper process in place to detect, track, and address defects during the implementation of the online reservation system, the system could experience errors, vulnerabilities, or performance issues that could impact functionality, user experience, and security. Proper defect management is essential to ensure the system operates as intended and meets quality standards.

Topics

#Quality Control#System Implementation#Defect Management#IS Audit Findings

Community Discussion

No community discussion yet for this question.

Full CISA Practice